Seeing some errors in the internal logs for lookup files. Can someone help me with the reason for these errors?
1) Unable to find filename property for lookup=xyz.csv will attempt to use implicit filename.
2) No valid lookup table file found for this lookup=*
3) The lookup table '*' does not exist or is not available. - This can be due to the definition or reference of the lookup file is there but the file has been deleted.
Hi. Have a look at
https://community.splunk.com/t5/Splunk-Search/Why-is-Lookup-definition-in-transforms-conf-not-return...
Sounds like there's a lookup definition in a transforms.conf and the corresponding lookup file does not exist.
You can use btool on the Splunk head to locate the setting. For example
/opt/splunk/bin/splunk btool transforms list --debug | grep file
You can see all the lookup file definitions.